5.9
Medium
CVE-2024-6833 A vulnerability in Zowe CLI allows local, privileged actors to store previously entered secure credentials in a…
Description
A vulnerability in Zowe CLI allows local, privileged actors to store previously entered secure credentials in a plaintext file as part of an auto-init operation.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Zowe 7.18 | 7.18.0 → < 7.23.5 | 7.23.5 |
Other CVEs of Zowe
The 6 CVEs of Zowe →
CVE-2024-9802
The conformance validation endpoint is public so everybody can verify the conformance of onboarded services
5.3
Medium
CVE-2024-9798
The health endpoint is public so everybody can see a list of all services
5.3
Medium
CVE-2024-6834
A vulnerability in APIML Spring Cloud Gateway which leverages user privileges by unexpected signing proxied request by…
9.0
Critical
CVE-2021-4326
A vulnerability in Imperative framework which allows already-privileged local actors to execute arbitrary shell commands…
3.3
Low